v1.7.18
2026-11-03
Fair use limits
- Where your plan includes a set number of staff logins, Users & Roles shows how many are in use once 80% are taken. When all are in use, a new staff login asks you to switch one off or ask your provider for more. Customer and portal logins are never counted, and nobody is ever switched off.
- Where your plan limits imports, one import file can carry up to 5,000 rows. A bigger file is refused before anything is imported, with a note to split it.
- Photos are always kept exactly as uploaded, because this app delivers them to your clients.
v1.7.17
2026-10-14
Users and team screens
- Adding or editing a user or a team member checks every field: an email another login already uses, or a name, email or phone that is too long, now gets a clear message instead of an error page.
- A typed password must be at least 8 characters, and saving a user can no longer leave them with an empty password.
- The Users screen edits owners and managers only: a client's portal login can no longer be turned into a staff login from it.
- A team member's skill is always one from the list.
v1.7.16
2026-10-13
Forms handle unusual input quietly
- Every form and filter reads each field as plain text, so an unusual value sent to a form no longer records a warning. Ordinary entries are saved exactly as before.
v1.7.15
2026-10-12
Security hardening
- Behind-the-scenes security hardening: every value shown on a page is escaped, list sorting only uses fixed options, and the app reads what your browser sends through one checked path. Nothing changes in how you use the app.
- Gallery access codes are stored with the same strong protection as passwords. Existing codes keep working and are upgraded the next time a client enters them.
v1.7.14
2026-10-13
Settings are read in full during set-up
- While a new copy is being set up or its sample data rebuilt, the app now reads every saved setting. Before this update, saving one setting during set-up could make the others (such as message templates and number prefixes) read as blank until the next page load.
v1.7.13
2026-10-12
Logo and favicon uploads use the shared image check
- Uploading a logo or favicon in Settings now goes through the same image check as the rest of the app: the file type is read from the file itself, the size is limited, and an SVG with scripting is refused.
- Nothing changes in how you upload.
v1.7.12
2026-10-12
Security fixes
- Limits on public lookups now apply per visitor, whatever code they try.
- The data API is for staff accounts only.
- The demo cannot change the demo sign-in or staff records.
v1.7.11
2026-10-12
Lists, search and forms handle unusual input
- A list opened with a very large page number now shows its last page instead of an error.
- Search boxes treat % and _ as ordinary characters, so a search finds exactly what you typed.
- When a form is sent back to correct a mistake, what you typed is shown on that form only. Before this update it could also fill in the next form you opened, even for a different record.
v1.7.10
2026-10-12
Security fixes
- Signing out now clears data the app saved on the device for offline use.
- Outgoing email checks the mail server address and cleans every header.
- Crew see only the shoots they are assigned to, new staff get a one-time password, and the lead API needs a key.
v1.7.9
2026-10-12
Security fixes
- Changing or resetting a password signs that account out on every other device.
- An account is locked for 15 minutes after 10 wrong passwords, whichever device they come from.
- A payment is credited to a booking exactly once.
v1.7.8
2026-10-12
Security fixes
- A user you switch off is signed out at once, everywhere, instead of when their session runs out.
- Gallery downloads, comments, favourites and selections follow the gallery's access code and expiry; payments are recorded only when captured.
v1.7.7
2026-10-12
Sign-in sessions stay with this app
- A sign-in now only works on the app it was made on, and is cleared if it turns up anywhere else.
- Everyone is asked to sign in once more after this update.
v1.7.6
2026-10-11
A guided tour of the menu
- The first time you open the app, a short tour walks through the menu one item at a time: what each place is for, with Next, Back and Skip.
- Take the tour again from the foot of the menu. On a phone the tour opens the menu for you.
v1.7.5
2026-10-10
Clearer storage notices
- The storage notice in the admin now says how much is used of how much, for example "430 MB of 512 MB".
- The notice at 80% can be hidden for a day with "Hide". From 95% on it always shows.
- When an upload is refused because storage is full, the message names your provider and offers "Buy more storage" when they sell it.
v1.7.4
2026-10-09
Times now follow your local time
- Fixed: due and overdue items, "today" lists, reminders and expiry times now follow your local time. Before, some of them ran up to 5½ hours late, and between midnight and 5:30 AM "today" could show yesterday.
v1.7.3
2026-10-09
Security hardening
- Browsers are now told to always open this app over a secure connection.
- Pictures in SVG format are shown safely: any script hidden inside one can no longer run.
v1.7.2
2026-10-09
Security and reliability update
- Signing in now issues a fresh security token for the new session, so a token from before you signed in can no longer be used.
- This app now runs on the same up-to-date core as every other app, so security fixes reach it at the same time.
v1.7.1
2026-10-08
Buy more storage from the app
- When the app is close to its storage limit or full, the notice now has a "Buy more storage" button that takes you to your provider's store, if they sell extra storage.
- The "storage full" screen leads with the same button, so more space is one tap away.
v1.7.0
2026-10-08
A clearer dashboard: what needs you today, first
- The dashboard now greets you by name with today's date, and opens with up to four bold tiles for what needs action today. Tap any tile to open the list behind it.
- Amber is used only for things that are overdue or need attention, so they stand out.
- Today's work is shown as a simple list with initials, status and time, and the other totals sit in quieter cards below.
- The side menu shows a small count next to lists that have work waiting.
v1.6.0
2026-10-08
Storage limit notices
- The admin shows a notice when the app has used 80% and 95% of the storage your provider gave it.
- When storage is full, new uploads and imports in the admin pause until more space is added. Everything else keeps working, and your website and customer pages are never affected.
- If your provider uses a hard limit, 7 days after storage fills up the admin shows a "storage full" screen with their contact details and a way to request a full copy of your data. Report downloads keep working.
v1.5.2
2026-10-07
An online payment confirms only the bill it was started for
- An online payment now confirms only the bill, order or booking it was started for, and records the amount the payment gateway was asked to collect. Before, the receipt details of one genuine payment could be sent again to mark a different, larger bill as paid.
v1.5.1
2026-10-07
Payment confirmation refuses when the gateway is not set up
- A payment is now confirmed only when the payment gateway's secret key is set. If the key is missing or has been cleared, the confirmation is refused instead of being checked against an empty key, and the payment stays unpaid.
v1.5.0
2026-10-05
Report a bug and Request a feature, step by step
- Report a bug and Request a feature are now two separate guided forms, three short steps each.
- A bug report asks what happened, what you did just before and how much it affects you, and notes the screen you were on.
- Attach up to five screenshots: pick them, drag them in, or paste straight from the clipboard. Large images are shrunk for you.
- New help page: Bug reports & feature requests.
v1.4.2
2026-09-26
WhatsApp messages are checked before they are accepted
- Incoming WhatsApp messages are now accepted only when WhatsApp has signed them with your app secret; until that secret is set they are refused. Message contents are no longer written to the app's log files.
v1.4.1
2026-09-06
App icon follows your branding
- The browser tab icon and the phone home-screen icon now use the icon you set in Settings, instead of always falling back to the logo.
v1.4.0
2026-08-30
Use your own web address
- Settings now has "Your web address" — connect a domain you already own (for example book.yourbusiness.com) to this app yourself, without going back to your provider.
- We show the exact DNS record to add, check it for you, and switch on a secure HTTPS certificate automatically once it is detected.
- Your original address keeps working, so links and bookmarks people already have are never broken.
v1.3.1
2026-08-28
Settings screen and user editing work again
- Fixed: the Settings screen returned a server error and could not be opened at all — branding, logo/favicon, payment, email and SMS options were all unreachable.
- Fixed: editing an existing user failed with a server error. The safeguard that stops an administrator from demoting or disabling their own account was calling helpers this app's base controller did not have, so it broke user editing instead of guarding it.
- Cause: two files rolled out across the fleet assumed helper methods (permission check, current-user id, flash message) that this app's base controller predated. The helpers are now defined, wired to this app's own roles and message styling.
- Housekeeping: the VERSION file and the changelog had drifted apart (1.2.0 vs 1.3.0); both now read the same release.
v1.3.0
2026-07-12
Redesigned Settings + Cashfree payments
- Settings is reorganised into clear cards — everyday options up top, technical ones under "Advanced".
- New: logo & favicon upload, SEO title/description, and a switch to show or hide the public landing page.
- Payments now support Razorpay AND Cashfree — pick one; the webhook URL to paste into your gateway is shown right there.
- Email via Brevo or your own SMTP; SMS via MSG91 (transactional or DLT) — choose one of each.
v1.2.0
2026-06-29
In-app documentation & What's new
- New searchable Documentation handbook, with light & dark mode.
- A "What's new" panel in the header announces every release.
- A versioned changelog you can browse release by release.
v1.1.0
2026-06-19
- White-label polish — your studio name, logo and colour palette across every screen.
- Choose a colour preset or set a fully custom brand palette in Settings.
- Faster dashboards and accessibility improvements.
v1.0.0
2026-06-11
- Initial release — public site with portfolio, packages, reviews and the enquiry form.
- Lead/enquiry CRM with follow-ups and lead-to-booking conversion.
- Bookings with availability/conflict checks, calendar, crew and equipment assignment.
- Branded quotations (line-item builder, tax, online approval) and e-signed contracts.
- Crew field app: shoot-day shot-list checklist, geo check-in and media upload.
- Client galleries with access codes, favourites, album selection limits, comments and signed downloads.
- Editing kanban, album proofing rounds and delivery tracking.
- Payments via Razorpay links plus manual/cash recording, invoices and receipts.
- SMS / WhatsApp / email notifications with editable templates, analytics and CSV export.
